// GLOSSARY

Privilege chain

A set of authority relationships in cloud identity and permission models that look harmless individually but together lead to privilege escalation. AWS IAM roles, Azure Entra ID subscription-level permissions and GCP service-account transitive permissions are typical addresses of this chain. It is not read from a configuration list; it is proven by manual validation and a safe proof of concept.